Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F_8e1BLZ0X5rCFT4JYCK9BIDgU0.roa
File: F_8e1BLZ0X5rCFT4JYCK9BIDgU0.roa (raw, json)
Hash identifier: o/cuLU4hiA4U9v7406mBs6eXE2sYeJ0C06xyGpFcpD8=
Subject key identifier: 17:FF:1E:D4:12:D9:D1:7E:6B:08:54:F8:25:80:8A:F4:12:03:81:4D
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0184166BACA24A716A3B83EBA335F7115C79
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F_8e1BLZ0X5rCFT4JYCK9BIDgU0.roa
Signing time: Wed 26 Oct 2022 22:31:06 +0000
ROA not before: Wed 26 Oct 2022 22:31:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25000
IP address blocks: 95.85.85.0/24 maxlen: 24
95.85.83.0/24 maxlen: 24
93.179.68.0/23 maxlen: 23
95.181.212.0/23 maxlen: 23
93.179.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:6b:ac:a2:4a:71:6a:3b:83:eb:a3:35:f7:11:5c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Oct 26 22:31:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ff1ed412d9d17e6b0854f825808af41203814d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:dd:33:66:13:f8:e1:79:e2:64:71:59:fa:
23:40:b0:01:c3:19:b1:40:14:8c:76:b5:38:dc:09:
f3:fe:6e:2f:32:a6:2b:33:f5:11:a4:95:64:17:8e:
8d:33:c5:59:73:58:17:16:41:77:d7:79:b8:47:cc:
f3:9d:94:c4:57:eb:16:df:94:8d:1a:84:78:d2:06:
eb:83:8f:ef:bc:bb:ee:53:f5:ba:28:98:bf:cc:b4:
8b:e8:1c:2c:cc:7c:ae:40:df:b3:7b:38:e6:cb:fb:
79:63:e0:03:f0:47:16:2b:6f:09:62:dc:34:20:15:
f2:be:d7:04:a2:6d:00:b3:e8:45:df:df:91:be:d2:
da:e0:4e:94:3c:6d:2a:ee:78:a1:6b:ca:e5:3c:9b:
ef:bd:bf:bb:a5:a4:2c:fa:7c:5f:2b:99:c6:03:a9:
53:d8:30:d8:2a:af:87:ba:78:0d:a3:f5:1f:62:1e:
55:d6:dc:8c:e5:5f:9d:dc:3f:bb:5e:82:5e:a5:1b:
6a:6a:fc:a5:d3:05:79:1c:ce:3b:d5:03:b0:c8:8e:
f0:4c:ff:0c:90:2e:33:37:62:96:22:38:e9:2e:21:
5c:46:35:f9:1b:7b:9c:4e:b8:11:18:c5:db:2d:9d:
eb:89:06:1d:14:0f:35:00:1f:28:11:d7:5e:d8:78:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:1E:D4:12:D9:D1:7E:6B:08:54:F8:25:80:8A:F4:12:03:81:4D
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F_8e1BLZ0X5rCFT4JYCK9BIDgU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.68.0/23
93.179.121.0/24
95.85.83.0/24
95.85.85.0/24
95.181.212.0/23
Signature Algorithm: sha256WithRSAEncryption
16:a6:ad:20:67:25:3f:e2:88:b1:da:bb:33:86:e4:50:cc:54:
52:47:fe:96:6e:82:9e:16:c1:f5:03:30:ba:17:de:52:c2:04:
37:d7:95:64:96:9b:14:58:df:7c:09:69:31:af:5b:cd:42:da:
a1:d3:78:e3:35:ca:c4:35:33:93:f7:f6:32:84:25:7a:0f:74:
ae:0f:87:e9:85:18:f7:3e:85:90:d6:a6:d8:20:64:09:f4:7d:
da:a4:7c:f6:e5:72:09:c1:67:2e:f9:4e:c3:4d:a4:64:ef:6f:
19:20:84:57:8a:2a:f7:69:f4:61:03:85:f7:93:4a:72:05:a8:
dc:c7:bc:e3:39:87:3b:fa:a2:85:85:1d:3a:41:bc:02:c2:6f:
39:04:66:b0:16:98:a1:30:6e:bd:c2:46:6a:80:ea:a3:9a:c3:
25:6e:cf:59:bf:48:a6:bd:da:b6:11:db:6d:fb:a8:21:6e:6b:
65:e1:a1:45:31:c0:ec:97:93:c5:cd:f0:aa:d1:7e:a5:9f:f6:
6f:38:5e:91:ad:e6:e4:e8:ef:ec:e3:27:27:a8:45:36:75:57:
94:57:d8:6e:bc:47:70:3a:d9:2b:6e:07:56:0e:04:e6:4a:71:
68:6f:ea:37:24:f2:37:b7:a6:0b:1f:8a:db:ec:70:b3:aa:1d:
f7:e8:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org